# Projection receipts

Copy `example-projection-receipt.json` at window start and fill in the live
engagement id, `projected_at`, `expires_at`, and identity *names* from the
custody procedure. Never put token values, passwords, or registry payloads
here.

Live admission:

```sh
PYTHONPATH=src python3 -m whitehat_security.cli admit-plane \
  engagements/<record>.json targets/audit-core-e2.json \
  --receipt engagements/receipts/<engagement>.json
```

Without `--receipt`, live admission fails closed and requests no credential.